Inki

Hi Thanks very much for replying. I *think* I know what it turned out to be after many hours of fiddling. It was referring to the rundll32.exe file which was in use, mainly by the Mcafee antivirus software I'm running. After turning that off, I was able to remove the files nloadwBC.dll that kept coming back in various locations, including the registry. And of course, end the processes. [nloadwBC.dll (Spyware.Passwords.XGen) -> No action taken. Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Spyware.Passwords.XGen) -> Value: NvCplDaemonTool -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NvCplDaemonTool (Spyware.Passwords.XGen) -> Value: NvCplDaemonTool -> No action taken.] I ended up removing the antivirus software, reinstalling it, then reinstalling the malwarebyes antimalware: none of the files were there anymore... (and just before posting this, ran it again: no problems!). No idea if this was really the cause, but the system is 10x faster again and seems to be running smoothly. Thought that was interesting... Thanks again for taking the time to reply. Inge

Hello Since a few weeks I have noticed my not too old pc slowing down and today two blue screens. Upon using virus checker and malwarebytes, I am now warned about this spyware.passwords.xgen. It cleans, I reboot to get rid of two registry values, even tried deleting manually but everytime I start up and check, more warnings appear!! Where do I start, how can I get rid of this? Many thanks in advance Ingeborg